Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/GWkOHprhLWqYD2ENAai8oym_wiw.roa
File: GWkOHprhLWqYD2ENAai8oym_wiw.roa (raw, json)
Hash identifier: q6SxSFGIr7ds33eqf3dA8T2KPOqg2V71TFN13mPhfMA=
Subject key identifier: 19:69:0E:1E:9A:E1:2D:6A:98:0F:61:0D:01:A8:BC:A3:29:BF:C2:2C
Certificate issuer: /CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Certificate serial: 01A0B04A32A88D419F5E32725308491196A8
Authority key identifier: FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/GWkOHprhLWqYD2ENAai8oym_wiw.roa
Signing time: Thu 17 Sep 2026 16:54:07 +0000
ROA not before: Thu 17 Sep 2026 16:54:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 185.49.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b0:4a:32:a8:8d:41:9f:5e:32:72:53:08:49:11:96:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Validity
Not Before: Sep 17 16:54:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=19690e1e9ae12d6a980f610d01a8bca329bfc22c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a4:17:e3:aa:cc:10:b3:38:43:a1:87:0f:05:
bf:cf:0c:46:d2:29:d2:25:db:9e:65:d5:c9:33:e4:
52:57:f9:fd:29:dd:05:ac:57:8e:bf:47:e6:e9:e4:
56:1f:49:cb:3a:39:03:90:da:5f:5c:f9:7e:71:82:
f9:39:0a:0b:42:c3:7a:f2:b5:1e:f6:1b:18:c8:09:
77:52:13:66:ba:77:95:6b:9a:57:02:be:c8:f0:90:
74:bd:60:e2:8f:e2:00:57:b7:0a:49:cf:82:c6:39:
06:75:71:09:0a:0f:62:aa:24:a7:fc:0f:fb:a3:22:
41:c0:be:4b:06:19:e4:35:5a:6f:12:18:66:66:f1:
d1:29:b3:30:0b:d5:39:bb:ee:d2:86:d9:ce:81:88:
e6:24:e8:3e:e5:0a:65:4e:a7:ab:82:10:98:23:e4:
0c:b5:a5:0b:4d:df:e5:4c:50:77:c8:07:24:b1:52:
da:dc:5c:33:6b:43:25:72:8b:ff:cd:15:28:98:31:
c2:9c:8a:10:c3:81:06:4e:22:ea:a6:eb:46:d3:22:
ce:6a:f3:70:af:df:38:71:74:9e:7b:6b:80:c8:8a:
7d:42:2c:82:91:65:5a:8a:df:b7:9f:71:00:bf:3f:
bd:c3:1c:ae:04:ba:49:fc:7d:d1:07:35:2e:95:d9:
6f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:69:0E:1E:9A:E1:2D:6A:98:0F:61:0D:01:A8:BC:A3:29:BF:C2:2C
X509v3 Authority Key Identifier:
keyid:FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/GWkOHprhLWqYD2ENAai8oym_wiw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.49.105.0/24
Signature Algorithm: sha256WithRSAEncryption
12:28:c2:71:37:c7:fc:7d:bf:f4:bc:57:75:62:25:78:42:ad:
d6:36:a1:63:a4:c3:8d:a3:38:10:62:f4:8f:67:fe:ad:01:43:
1a:3b:84:33:24:95:ba:d8:f2:d4:f6:57:22:b7:48:ad:ec:cf:
12:70:e7:f2:34:e2:3e:a3:12:36:17:b0:9d:4f:04:e0:55:ff:
b9:80:4d:7c:34:25:dc:f2:be:c7:84:55:b3:d9:8f:c8:6a:8d:
93:45:a2:e9:e8:0e:fc:4a:62:68:22:96:c5:98:51:ea:d9:2e:
cd:67:c5:c1:a9:9d:d6:b0:d2:7c:58:cb:17:11:23:73:55:30:
83:c9:ff:c8:91:40:62:9e:34:40:39:56:7e:a4:34:ed:04:13:
29:c6:c4:65:af:dd:d3:42:4a:03:73:05:13:7a:cf:55:2d:1d:
e7:4a:98:37:73:c8:b6:4e:30:7f:9a:48:15:26:83:e3:bd:4e:
f4:a1:ab:12:88:a0:b0:e6:0c:46:ef:a3:6f:1f:ab:36:e0:f3:
a9:f6:0b:5e:f0:90:a4:ee:dc:c0:c5:a6:af:88:99:f1:25:c5:
cf:5d:bd:77:13:4e:55:0c:67:e3:13:07:70:f5:d7:4c:65:e2:
22:74:32:a8:d9:60:98:1f:b4:a1:eb:a2:aa:f1:18:49:60:aa:
b9:ef:ad:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:21:14 2026 by rpki-client